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This  report  is  the  eighth  in  a  series  resulting  from  our  audit  of  “Year  2000 
Issues  Within  the  U.S.  Pacific  Command’s  Area  of  Responsibility.”  This  report 
discusses  year  2000  issues  for  the  Alaskan  Command. 

We  are  providing  this  report  for  review  and  comment.  We  considered 
management  comments  on  a  draft  of  this  report  in  preparing  the  final  report.  DoD 
Directive  7650.3  requires  that  all  audit  recommendations  be  resolved  promptly,  and 
there  is  special  urgency  regarding  year  2000  conversion  issues.  Alaskan  Command 
comments  were  generally  responsive.  As  a  result  of  management  comments,  we 
revised  Recommendation  A.  1 .  No  further  response  from  Alaskan  Command  is 
necessary.  U.S.  Army  Alaska  has  misinterpreted  Recommendations  B.l.  and  B.3.  and 
comments  on  Recommendation  B.2.  were  partially  responsive.  Therefore,  we  request 
that  U.S.  Army  Alaska  provide  additional  comments  on  Recommendations  B.l.,  B.2., 
and  B.3.  by  October  29,  1999. 

We  appreciate  the  courtesies  extended  to  the  audit  staff.  Questions  on  the  audit 
should  be  directed  to  Mr.  Robert  M.  Murrell  at  (703)  604-9210  (DSN  664-9210) 
(rmurrell@dodig.osd.mil)  or  Mr.  Young  J.  Jin  at  (703)  604-9272  (DSN  664-9272) 
(yjin@dodig.osd.mil).  See  Appendix  D  for  the  report  distribution.  The  audit  team 
members  are  listed  inside  the  back  cover. 
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Area  of  Responsibility 

Alaskan  Command 


Executive  Summary 


Introduction.  This  is  one  in  a  series  of  reports  being  issued  by  the  Inspector  General, 
DoD,  in  accordance  with  an  informal  partnership  with  the  Chief  Information  Officer, 
DoD,  to  monitor  DoD  efforts  to  address  the  year  2000  computing  challenge.  For  a  list 
of  audit  projects  addressing  the  issue,  see  the  year  2000  web  pages  on  the  IGnet  at 
http://www.ignet.gov. 

Objectives.  The  overall  audit  objective  was  to  evaluate  whether  the  U.S.  Pacific 
Command  adequately  planned  for  and  managed  year  2000  risks  to  avoid  disruptions  to 
its  mission.  Specifically,  we  evaluated  the  overall  year  2000  program  management  and 
the  management  of  contingency  plans  by  the  Alaskan  Command. 

Results.  The  Alaskan  Command  had  taken  actions  to  ensure  mission  capability  through 
the  year  2000  transition  period  and  had  begun  year  2000  outreach  coordination  with 
civil  authorities  and  other  Federal  agencies  in  Alaska.  In  addition,  the  Alaskan 
Command  had  completed  year  2000  assessments  of  its  29  mission-critical  systems.  As 
of  June  4,  1999,  24  of  the  29  mission-critical  systems  were  year  2000  compliant  and  the 
last  system  should  be  compliant  by  October  30,  1999.  The  Alaskan  Command  also  had 
prepared  year  2000  contingency  plans  for  all  of  its  mission-critical  systems  and  had 
exercised  the  plans.  However,  the  Alaskan  Command  needed  to  prioritize  workarounds 
to  ensure  critical  mission  accomplishment  if  resources  prove  inadequate.  The  Alaskan 
Command  also  needed  to  improve  the  coordination  of  workarounds  outlined  in  its 
various  year  2000  contingency  plans  to  ensure  sufficient  resources  are  in  place  if 
simultaneous  workaround  measures  are  implemented  (finding  A). 

In  contrast,  U.S.  Army  Alaska  started  its  year  2000  conversion  effort  late.  As  of 
September  27,  1999,  57  of  62  required  contingency  plans  had  been  prepared.  Once 
prepared,  U.S.  Army  Alaska  will  need  to  exercise  the  contingency  plans,  prioritize 
workarounds  to  ensure  critical  mission  accomplishment  if  resources  prove  inadequate, 
and  coordinate  workarounds  outlined  in  its  year  2000  contingency  plans  to  ensure 
sufficient  resources  are  in  place  if  simultaneous  workaround  measures  are  implemented 
(finding  B). 

Summary  of  Recommendations.  We  recommend  that  the  Commander,  Alaskan 
Command,  continue  to  track  and  monitor  the  renovation  of  the  noncompliant  system 
and  finalize  the  prioritization  and  coordination  of  workarounds  outlined  in  its 
contingency  plans  to  ensure  mission  accomplishment  if  workarounds  are  needed 


simultaneously.  We  recommend  that  the  Commander,  U.S.  Army  Alaska,  immediately 
implement  vigorous  year  2000  efforts,  including  assessment  verification,  contingency 
planning,  and  workaround  prioritization  and  coordination  efforts,  to  ensure  the 
accomplishment  of  U.S.  Army  Alaska  critical  missions. 

Management  Comments.  The  Commander,  Alaskan  Command,  concurred  with  the 
recommendations  to  track  and  monitor  the  renovation  of  the  noncompliant  system  and 
finalize  the  prioritization  and  coordination  of  workarounds  outlined  in  its  contingency 
plans.  He  stated  corrective  actions  had  been  taken  based  on  preliminary 
recommendations.  U.S.  Army  Alaska  concurred,  partially  concurred,  and 
nonconcurred  with  elements  of  the  finding  by  stating  that  the  report  did  not  accurately 
indicate  U.S.  Army  Alaska  year  2000  responsibilities  and  readiness.  Management 
comments  on  the  finding  are  discussed  in  Appendix  C.  U.S.  Army  Alaska  concurred 
with  the  recommendations,  stating  that  it  would  increase  monitoring  efforts  in  regard  to 
risk  assessment,  continue  efforts  in  regard  to  continuity  of  operations  plans,  and 
develop  specific  year  2000  operational  contingency  plans.  A  discussion  of  management 
comments  on  the  recommendations  is  in  the  Finding  section  of  the  report,  and  the 
complete  text  of  the  comments  is  in  the  Management  Comments  section. 

Audit  Response.  Commander,  Alaskan  Command,  comments  were  generally 
responsive.  As  a  result  of  management  comments,  we  revised  one  recommendation 
slightly.  No  further  response  is  required.  U.S.  Army  Alaska  has  misinterpreted  the 
recommendation  to  verify  the  accuracy  of  year  2000  assessments  of  mission-critical 
systems.  Monitoring  risk  assessments  does  not  meet  the  intent  of  the  recommendation. 
U.S.  Army  Alaska  comments  were  partially  responsive  to  the  recommendation  to 
develop  and  exercise  year  2000  contingency  plans  for  mission-critical  systems.  The 
monitoring  efforts  described  by  U.S.  Army  Alaska  need  to  include  operational 
contingency  plans,  which  U.S.  Army  Alaska  will  also  need  to  develop,  when 
necessary,  and  exercise.  U.S.  Army  Alaska  has  misinterpreted  the  recommendation  to 
perform  the  prioritization  and  coordination  of  workarounds  outlined  in  the  contingency 
plans.  We  request  that  U.S.  Army  Alaska  provide  additional  comments  in  response  to 
the  final  report  by  October  29,  1999. 
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Background 

This  report  is  the  eighth  in  a  series  resulting  from  our  audit  of  “Year  2000 
Issues  Within  the  U.S.  Pacific  Command’s  Area  of  Responsibility.”  This  report 
discusses  year  2000  (Y2K)  issues  for  the  Alaskan  Command  (ALCOM).  Other 
reports  in  the  series  that  have  been  issued  as  final  reports  are  identified  in 
Appendix  B. 

DoD  Y2K  Management  Strategy.  In  his  role  as  the  DoD  Chief  Information 
Officer,  the  Assistant  Secretary  of  Defense  (Command,  Control, 
Communications,  and  Intelligence)  is  coordinating  the  overall  DoD  Y2K 
conversion  effort.  The  Assistant  Secretary  of  Defense  (Command,  Control, 
Communications,  and  Intelligence)  issued  various  iterations  of  a  Y2K 
management  plan  to  provide  direction  and  make  the  DoD  Components 
responsible  for  implementing  the  five-phase  Y2K  management  process.  The 
“DoD  Year  2000  Management  Plan,  Version  2.0”  (DoD  Management  Plan), 
December  1998,  is  the  most  current  iteration. 

The  Joint  Chiefs  of  Staff.  The  Chairman  of  the  Joint  Chiefs  of  Staff  is  the 
principal  military  adviser  to  the  President,  the  Secretary  of  Defense,  and  the 
National  Security  Council.  The  Secretaries  of  the  Military  Departments  assign 
all  forces  under  their  jurisdiction  to  the  unified  commands  to  perform  missions 
assigned  to  those  commands.  The  Joint  Staff  assists  the  Chairman  of  the  Joint 
Chiefs  of  Staff  with  unified  strategic  direction  of  the  combatant  forces;  unified 
operation  of  the  combatant  commands;  and  integration  into  an  efficient  team  of 
air,  land,  and  sea  forces. 

U.S.  Pacific  Command.  The  U.S.  Pacific  Command  (USPACOM)  is  the 
largest  of  the  nine  unified  commands  of  the  Department  of  Defense.  It  was 
established  as  a  unified  command  on  January  1,  1947,  as  an  outgrowth  of  the 
command  structure  used  during  World  War  II.  The  USPACOM  area  of 
responsibility  includes  50  percent  of  the  earth’s  surface  and  two-thirds  of  the 
world’s  population.  It  encompasses  more  than  100  million  square  miles, 
stretching  from  the  west  coast  of  North  and  South  America  to  the  east  coast  of 
Africa  and  from  the  Arctic  in  the  north  to  the  Antarctic  in  the  south.  It  also 
includes  Alaska,  Hawaii,  and  eight  U.S.  territories.  The  overall  mission  of 
USPACOM  is  to  promote  peace,  deter  aggression,  respond  to  crises,  and,  if 
necessary,  fight  and  win  to  advance  security  and  stability  throughout  the  Asian- 
Pacific  region. 

USPACOM,  located  at  Camp  H.M.  Smith,  Hawaii,  is  supported  by  Component 
commands  from  each  Service:  U.S.  Army  Pacific  (USARPAC),  U.S.  Pacific 
Fleet,  U.S.  Pacific  Air  Forces,  and  Marine  Forces  Pacific.  In  addition, 
USPACOM  exercises  combatant  command  over  four  sub-unified  commands 
within  the  region.  The  sub-unified  commands  are  U.S.  Forces  Japan,  U.S. 
Forces  Korea,  ALCOM,  and  Special  Operations  Command  Pacific. 
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Alaskan  Command.  ALCOM  is  responsible  for  maintaining  air  sovereignty, 
deploying  forces  worldwide  for  contingencies,  providing  support  to  Federal  and 
State  authorities  during  civil  emergencies,  and  conducting  joint  training  for 
rapid  deployment  of  combat  forces.  ALCOM  combined  forces  include  about 
24,000  Service  personnel  assigned  to  U.S.  Army  Alaska  (USARAK),  U.S. 
Naval  Forces  Alaska,  and  the  11th  Air  Force.  USARAK,  U.S.  Naval  Forces 
Alaska,  and  the  11th  Air  Force  report  directly  to  USARPAC,  U.S.  Pacific 
Fleet,  and  U.S.  Pacific  Air  Forces,  respectively,  on  Service  and  Component 
issues  and  to  ALCOM  on  Alaska-specific  matters  and  joint  responsibilities.  The 
Commander,  ALCOM,  also  serves  as  Commander,  Alaskan  North  American 
Aerospace  Defense  Command  Region,  and  Commander,  11th  Air  Force. 

U.S.  Army  Alaska.  The  USARAK  mission  is  to  deploy  rapidly  in  the 
Pacific  theater  and  elsewhere  as  directed  in  support  of  contingency  operations 
and  USPACOM  objectives. 

U.S.  Naval  Forces  Alaska.  The  U.S.  Naval  Forces  Alaska  mission  is 
maritime  safety,  search  and  rescue,  law  enforcement  of  territorial  waters,  and 
maintenance  of  navigational  maritime  aids.  The  Commander  of  the  17th  U.S. 
Coast  Guard  District  also  serves  as  the  Commander,  U.S.  Naval  Forces  Alaska. 

11th  Air  Force.  The  1 1th  Air  Force  mission  is  to  maintain  air 
superiority  in  Alaska  and  support  Alaska-based  ground  forces  and  combat-ready 
air  forces  for  employment  by  unified  commanders. 

State  of  Alaska  Year  2000  Program.  An  Alaska  Y2K  Task  Force  was 
established  in  February  1998  to  ensure  that  all  branches  of  State  government 
were  adequately  addressing  the  State  of  Alaska’s  Y2K  issues.  In  August  1998, 
the  Office  of  the  Governor,  State  of  Alaska,  established  the  Y2K  Project  Office 
to  coordinate  Y2K  efforts  and  to  assist  State  and  local  government  agencies  in 
meeting  the  challenge  of  the  Y2K  problem.  For  more  information  on  Alaska’s 
Y2K  status,  visit  the  State  of  Alaska  Y2K  web  site  at 
http://www.state.ak.us/y2000. 


Objectives 

The  overall  audit  objective  was  to  evaluate  whether  USPACOM  adequately 
planned  for  and  managed  Y2K  risks  to  avoid  disruptions  to  its  mission. 
Specifically,  we  evaluated  the  overall  Y2K  program  management  and  the 
management  of  contingency  plans  by  ALCOM.  See  Appendix  A  for  a 
discussion  of  the  audit  scope  and  methodology  and  Appendix  B  for  a  summary 
of  prior  coverage. 
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A.  Status  of  the  Alaskan  Command 
Year  2000  Program 

ALCOM  had  taken  actions  to  ensure  mission  capability  through  the  Y2K 
transition  period  and  had  begun  Y2K  outreach  coordination  with  civil 
authorities  and  other  Federal  agencies  in  Alaska.  In  addition,  ALCOM 
had  completed  Y2K  assessments  of  its  29  mission-critical  systems.  As  of 
June  4,  1999,  24  of  the  29  mission-critical  systems  were  Y2K  compliant 
and  the  last  system  should  be  compliant  by  October  30,  1999.  ALCOM 
also  had  prepared  Y2K  contingency  plans  for  all  of  its  mission-critical 
systems  and  had  exercised  the  plans.  However,  ALCOM  needed  to 
prioritize  workarounds  to  ensure  critical  mission  accomplishment  if 
resources  prove  inadequate.  ALCOM  also  needed  to  improve  the 
coordination  of  workarounds  outlined  in  its  various  Y2K  contingency 
plans  to  ensure  sufficient  resources  are  in  place  if  simultaneous 
workaround  measures  are  implemented.  As  a  result,  ALCOM  needed  to 
keep  working  through  the  time  remaining  in  1999  to  minimize  Y2K  risk. 


Year  2000  Program  Actions 

The  ALCOM  leadership  had  taken  actions  to  ensure  mission  capability  through 
the  Y2K  transition  period.  The  actions  included: 

•  establishing  a  Y2K  Executive  Steering  Group  and 

•  publishing  ALCOM  Y2K  Operation  Order  (OPORD). 

Y2K  Executive  Steering  Group.  The  Commander,  ALCOM,  chairs  the  Y2K 
Executive  Steering  Group,  which  was  established  in  November  1998  to  ensure 
that  military  Y2K  efforts  throughout  Alaska  are  integrated  and  comprehensive. 
Membership  includes  leaders  from  the  Services  as  well  as  National  Guard  and 
Reserves  who  are  stationed  in  Alaska.  Military  organizations  in  Alaska  had 
briefed  the  Commander  with  Y2K  updates  monthly  since  November  1998. 
However,  starting  March  31,  1999,  the  Commander  required  the  military 
organizations  to  brief  him  with  Y2K  updates  every  2  weeks. 

Y2K  OPORD.  The  Commander,  ALCOM,  issued  a  Y2K  policy  memorandum, 
“Year  2000  Plan  for  Alaskan-Based  DoD  Military  Forces,”  on  March  16,  1999, 
to  organize  ALCOM  Y2K  work  in  the  format  of  an  OPORD.  On  April  30, 
1999,  the  Commander  issued  OPORD  5220-99,  “Operation  Millennium 
Challenge,”  to  provide  guidance  and  tasking  to  all  DoD  military  forces  in  the 
ALCOM  area  of  responsibility  to  prepare  for  the  Y2K  critical  crossover  dates, 
respond  to  Y2K-related  failures  in  mission-critical  systems,  and  conduct  a 
thorough  after-action  review.  ALCOM  plans  to  conduct  the  Operation 
Millennium  Challenge  in  three  phases:  prior  to  September  1,  1999; 

September  1,  1999,  through  March  31,  2000;  and  after  March  31,  2000. 
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Year  2000  Outreach  Actions 


ALCOM  had  begun  Y2K  outreach  coordination  with  civil  authorities  and  other 
Federal  agencies  in  Alaska  in  accordance  with  established  Federal  and  DoD 
Y2K  outreach  guidance. 

Executive  Order.  Executive  Order  13073,  “Year  2000  Conversion,” 

February  4,  1998,  directed  agency  heads  to  assist  and  cooperate  with  State, 
local,  and  tribal  governments  to  address  the  Y2K  problem  where  those 
governments  depend  on  Federal  information  or  information  technology  or  the 
Federal  Government  is  dependent  on  those  governments  to  perform  critical 
missions. 

Deputy  Secretary  of  Defense  Policy  Memorandum.  “DoD  Year  2000  Support 
to  Civil  Authorities,”  February  22,  1999,  was  the  first  in  a  series  of  policy 
memorandums  designed  to  provide  guidance  to  ensure  that  DoD  would  be  able 
to  effectively  respond  to  the  many  and  varied  demands  that  may  be  placed  upon 
it  during  the  Y2K  transition  period.  The  memorandum  stated  that  DoD  is  taking 
prudent  actions  to  ensure  its  ability  to  meet  its  national  security  responsibilities 
and,  consistent  with  those  responsibilities,  to  respond  to  requests  for  assistance 
from  both  domestic  and  overseas  civil  authorities  throughout  the  Y2K  transition 
period. 

Some  of  the  outreach  actions  ALCOM  took  to  ensure  Y2K  coordination  were: 

•  hosting  a  Statewide  Y2K  Workshop  and 

•  coordinating  Y2K  issues  with  the  State  of  Alaska. 

Y2K  Workshop.  On  February  12,  1999,  ALCOM  hosted  a  Y2K  workshop  at 
ALCOM  headquarters,  Elmendorf  Air  Force  Base,  Alaska.  The  workshop  was 
attended  by  representatives  from  ALCOM,  USARAK,  the  11th  Air  Force, 
Reserves,  the  Federal  Aviation  Administration,  the  Federal  Emergency 
Management  Agency,  the  Department  of  Interior,  State  of  Alaska  organizations, 
the  Alaska  Department  of  Emergency  Services,  National  Guard  and  State 
militia,  Alaska  Public  Utilities  Commission,  and  local  governments.  The 
purpose  of  the  workshop  was  to  compare  Y2K  efforts  among  the  Alaskan 
military  organizations  and  their  partners  in  the  community  at  the  local,  State, 
and  Federal  level. 

Y2K  Coordination  With  the  State  of  Alaska.  On  February  18,  1999,  the 
Commander,  ALCOM,  sent  a  letter  to  the  lieutenant  governor  of  Alaska 
discussing  the  sense  of  cooperation  and  the  mutual  efforts  that  had  been  initiated 
to  solve  the  Y2K  problem.  ALCOM  also  invited  the  Alaska  National  Guard  and 
the  Alaska  Department  of  Emergency  Services  to  become  full  members  of  the 
ALCOM  Y2K  Executive  Steering  Group  to  discuss  mutual  Y2K  efforts. 
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Year  2000  Assessment 


ALCOM  had  identified  29  mission-critical  systems  and  had  determined  as  of 
June  4,  1999,  that  24  systems  were  Y2K  compliant.  The  five  remaining 
automated  systems  were  for  heat,  power  generation,  sewage, 
telecommunications,  and  water.  Actions  were  ongoing  to  ensure  compliance  of 
those  systems.  In  its  management  comments,  ALCOM  stated  that  it  still  needed 
to  ensure  Y2K  compliance  of  the  telecommunications  and  water  systems. 

The  telecommunications  system  is  a  command  and  control  network  backbone 
system  that  belongs  to  the  11th  Air  Force.  The  system  supports  the  command 
and  control  function  at  Elmendorf  Air  Force  Base,  and  is  not  being  reported  to 
the  DoD  Y2K  Reporting  Database.  The  water  system  is  a  potable  water 
distribution  system  that  belongs  to  USARAK.  The  system  supports  potable 
water  at  both  Elmendorf  Air  Force  Base  and  Fort  Richardson,  and  is  not  being 
reported  to  the  DoD  Y2K  Reporting  Database.  By  August  30,  1999,  the  water 
system  was  determined  to  be  compliant.  ALCOM  expects  the 
telecommunications  system  to  be  compliant  by  October  30,  1999. 


Year  2000  Contingency  Plans 

ALCOM  had  prepared  Y2K  contingency  plans  for  all  of  its  mission-critical 
systems  and  by  June  1999  had  exercised  workarounds  outlined  in  contingency 
plans.  For  example,  in  order  to  assess  the  viability  of  contingency  plans 
developed  for  22  mission-critical  communications  and  information  systems, 
ALCOM  conducted  a  Y2K  exercise  on  June  3,  1999.  The  exercise  participants 
were: 

•  ALCOM, 

•  USARAK, 

•  U.S.  Naval  Forces  Alaska, 

•  11th  Air  Force, 

•  Alaska  Department  of  Emergency  Services, 

•  Alaska  National  Guard,  and 

•  Alaskan  North  American  Aerospace  Defense  Command  Region. 

Furthermore,  ALCOM  participated  in  North  American  Aerospace  Defense 
Command  and  USPACOM  operational  evaluations  conducted  in  February  and 
April  1999,  respectively. 
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Prioritization  and  Coordination  of  the  Year  2000 
Contingency  Plans 

ALCOM  had  not  yet  fully  identified  and  assessed  the  resources  required  to 
implement  workarounds  for  the  Y2K  contingency  plans  of  all  ALCOM 
functional  elements  or  DoD  organizations  and,  as  a  result,  had  not  initiated 
plans  to  prioritize  and  coordinate  those  resource  requirements  should  resources 
prove  inadequate. 

For  example,  ALCOM  contingency  plans  identified  six  communications  systems 
for  use  in  workarounds  in  case  one  or  more  of  the  22  mission-critical  ALCOM 
communications  and  information  exchange  systems  failed  because  of  the  Y2K 
problem.  The  six  systems  were: 

•  Automatic  Digital  Network, 

•  Commercial  Telephone  Line  With  Secured  Telephone  Line  Unit  and 
Fax, 

•  Defense  Switched  Network  With  Secured  Telephone  Line  Unit  and 
Fax, 

•  High  Frequency  Telephone  Line, 

•  Secret  Internet  Protocol  Router  Network,  and 

•  Unclassified  but  Sensitive  Internet  Protocol  Router  Network. 

The  following  table  shows  how  many  of  the  22  ALCOM  contingency  plans 
designate  those  systems  for  either  primary  or  secondary  use  in  workarounds. 

Communications  Systems  Designated  as  Workarounds  in 
ALCOM  Contingency  Plans 


1 

Svstems 

Primary 

Workaround 

Secondary 

Workaround 

Automatic  Digital  Network 

5 

0 

Commercial  Telephone  Line  With 

Secured  Telephone  Line  Unit  and  Fax 

2 

7 

Defense  Switched  Network  With 

Secured  Telephone  Line  Unit  and  Fax 

7 

12 

High  Frequency  Telephone  Line 

0 

1 

Secret  Internet  Protocol  Router  Network 

9 

1 

Unclassified  but  Sensitive  Internet 

Protocol  Router  Network 

0 

1 

Global  communications  systems  may  experience  widespread  infrastructure 
problems  as  a  result  of  Y2K  problems,  within  not  only  Alaska  but  throughout 
DoD,  and  may  cause  many  commands  to  simultaneously  implement  workaround 
measures  using  the  same  systems.  Therefore,  ALCOM  should  not  presume  that 
all  six  communications  systems  would  be  available  for  use  as  workarounds  for 
the  period  immediately  following  January  1,  2000.  ALCOM  should  prioritize 
workaround  requirements  identified  in  Y2K  contingency  plans  to  ensure  limited 
resources  are  allocated  to  its  most  critical  missions,  functions,  and  processes. 
Once  prioritization  of  workaround  requirements  has  been  accomplished, 
coordination  must  be  performed  to  reallocate  available  resources. 

ALCOM  also  needed  to  assess  the  viability  of  all  of  its  Y2K  contingency  plans 
and  coordinate  requirements  for  other  information-technology  systems  and  non- 
information-technology  systems  for  DoD  organizations  in  Alaska.  Specifically, 
ALCOM  needed  to  fully  coordinate  and  assess  for  simultaneous  availability 
contingency  plan  workarounds.  Some  missions  may  be  impaired  if  workarounds 
prove  inadequate.  The  simultaneous  execution  of  workarounds  may  cause 
multiple  missions  to  be  impaired,  should  there  be  insufficient  resources  to  meet 
ALCOM  critical  mission  requirements. 


Corrective  Actions  Taken  by  Management 

Following  our  interim  briefings  on  the  audit  progress  on  June  4,  1999,  to  the 
ALCOM  Y2K  officer,  ALCOM  requested  the  Defense  Information  Systems 
Agency  (DISA)-Alaska  to  verify  that  sufficient  communications  resources  are  in 
place  for  the  ALCOM  area  of  responsibility.  Subsequently,  on  June  7,  1999, 
DISA- Alaska  provided  assurances  that  ALCOM  had  enough  resources  to 
support  its  Y2K  communications  contingency  plans.  In  addition,  ALCOM  was 
in  the  process  of  establishing  procedures  to  prioritize  communications  using  a 
model  concept  known  as  “minimize.”  Minimize  will  be  in  place  to  control 
communications  in  all  available  media  for  any  future  contingencies,  including 
possible  Y2K  events.  In  addition,  during  our  briefings  on  initial  audit  results  on 
June  8,  1999,  to  the  ALCOM  Chief  of  Staff,  the  Chief  of  Staff  agreed  to  verify 
sufficient  resources  are  in  place  and  to  establish  priorities  to  provide  for  the 
accomplishment  of  critical  ALCOM  missions  in  other  functional  areas  if 
workaround  measures  are  needed  simultaneously. 


Recommendations,  Management  Comments,  and  Audit 
Response 

Revised  Recommendation.  We  initially  recommended  that  ALCOM  track  and 
monitor  the  renovation  of  the  noncompliant  mission-critical  system  for  water. 
As  a  result  of  management  comments,  we  revised  Recommendation  A.l.  to 
reflect  the  Y2K  compliance  status  of  systems  as  of  August  30,  1999,  and 
updated  the  report  accordingly. 
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A.  We  recommend  that  the  Commander,  Alaskan  Command: 

1.  Continue  to  track  and  monitor  the  renovation  of  the  noncompliant 
mission-critical  system  for  telecommunications. 

2.  Finalize  the  prioritization  and  coordination  of  the  workarounds 
outlined  in  its  contingency  plans  to  ensure  that  sufficient  resources  are  in 
place  for  the  accomplishment  of  Alaskan  Command  critical  missions  in 
other  functional  areas  if  workarounds  are  needed  simultaneously. 

Management  Comments.  The  Commander,  ALCOM,  concurred,  stating  he 
will  continue  to  track  and  monitor  the  renovation  of  noncompliant  mission- 
critical  systems.  He  also  stated  that  corrective  actions  had  been  taken  to  ensure 
that  the  Alaskan  Command  has  sufficient  communications  resources  to  support 
Y2K  contingency  plans.  He  also  noted  that  workaround  system  restoration 
priorities  had  been  outlined. 

Audit  Response.  The  Alaskan  Command  comments  were  sufficiently 
responsive. 
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B.  Status  of  the  U.S.  Army  Alaska 
Year  2000  Program 

USARAK  started  its  Y2K  conversion  effort  late.  As  of  September  27, 
1999,  57  of  62  required  contingency  plans  had  been  prepared.  Once 
prepared,  USARAK  will  need  to  exercise  the  contingency  plans. 
Further,  USARAK  needed  to  prioritize  workarounds  to  ensure  critical 
mission  accomplishment  if  resources  prove  inadequate  and  coordinate 
workarounds  outlined  in  its  Y2K  contingency  plans  to  ensure  sufficient 
resources  are  in  place  if  simultaneous  workaround  measures  are 
implemented.  USARAK  was  significantly  behind  in  its  Y2K 
contingency  planning,  testing,  prioritization,  and  coordination  efforts 
because  USARAK  had  not  established  a  vigorous  Y2K  management 
program.  As  a  result,  the  risk  of  Y2K-related  disruption  to  the 
USARAK  mission  had  not  yet  been  sufficiently  minimized. 


U.S.  Army  Alaska  Year  2000  Assessment 

USARAK  was  significantly  behind  in  its  Y2K  assessment  efforts;  it  had  not 
officially  initiated  formal  Y2K  efforts  until  March  1999.  USARAK  did  not 
meet  the  established  Y2K  assessment  deadline  and  the  accuracy  of  its  mission- 
critical  system  assessments  was  questionable. 

Y2K  Assessment  Guidance.  DoD  uses  the  Federal  Government-wide 
five-phase  Y2K  management  process  stipulated  by  the  Office  of  Management 
and  Budget  (OMB).  Target  completion  date  of  the  second  phase,  assessment 
phase,  was  June  30,  1997.  At  the  conclusion  of  the  assessment  phase,  OMB 
required  identification  of  mission-critical  systems  and  assessment  of  each  system 
for  Y2K  compliance. 

Mission-Critical  System  Identification.  USARAK  completed  its  identification 
of  72  mission-critical  systems  on  March  31,  1999.  Subsequently,  as  of 
September  27,  1999,  USARAK  showed  only  62  mission-critical  systems.  Ten 
of  the  62  mission-critical  systems  are  unique  to  USARAK,  as  opposed  to  global 
Army  or  DoD-wide  systems.  The  10  USARAK-unique  mission-critical  systems 
are  reported  to  the  USPACOM  Y2K  Reporting  Database;  while  the  52  global 
systems,  which  are  also  part  of  the  USARAK  identified  mission-critical  systems, 
are  reported  by  the  program  managers  or  system  owners  of  those  global  systems 
to  the  DoD  Y2K  Reporting  Database. 

Mission-Critical  System  Reporting  to  the  DoD  Y2K  Database.  The  Assistant 
Secretary  of  Defense  (Command,  Control,  Communications,  and  Intelligence) 
memorandum,  “Year  2000  (Y2K)  Compliance-FY  1999  Reporting 
Requirements,”  September  23,  1998,  states  that  the  Military  Departments,  the 
Commanders-in-Chief,  and  the  Defense  Agencies  are  responsible  for  consistent, 
accurate  and  timely  submission  of  Y2K  information  to  the  DoD  Y2K  Reporting 
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Database.  Those  organizations  are  to  input  information  concerning  their 
mission-critical  systems  directly  into  the  DoD  Y2K  Reporting  Database. 

USPACOM  developed  its  own  Y2K  database  of  theater  mission-critical  systems, 
since  data  fields  do  not  exist  on  the  DoD  Y2K  Reporting  Database  to  identify 
users  of  systems.  USPACOM  required  its  headquarters,  sub-unified,  and 
Component  commands  to  report  their  unique  mission-critical  systems  to  the 
USPACOM  Y2K  database.  Using  that  information,  USPACOM  determined 
which  theater-unique  mission-critical  systems  would  be  reported  to  the  DoD 
Y2K  Reporting  Database  as  mission-critical  for  the  Pacific  theater.  Currently, 
USPACOM  reports  10  mission-critical  systems  to  the  DoD  Y2K  Reporting 
Database,  although  USPACOM  has  over  900  mission-critical  systems  shown  in 
its  own  database.  However,  USPACOM  did  not  report  any  USARAK-unique 
mission-critical  systems  as  theater  mission-critical  systems. 

Accuracy  of  the  Y2K  Assessment.  The  accuracy  of  USARAK  assessments 
may  be  questionable.  USARAK  reported,  as  of  March  31,  1999,  that  of  72 
systems,  52  were  Y2K  compliant  and  20  were  not.  However,  the  accuracy  of 
the  individual  system  assessments  was  questionable.  For  example,  USARAK 
assessed  the  Departmental  Local  Area  Network  communications  system  as 
mission-critical  and  Y2K  compliant.  The  system  is  owned  by  USARPAC  and 
comprises  Government  off-the-shelf  and  commercial  off-the-shelf  equipment  and 
software.  However,  USARAK  did  not  know  the  Y2K  status  of  that  equipment 
and  software.  USARAK  should  have  obtained  Y2K  information  on  the  system’s 
components  in  order  to  verify  its  assessment. 

Compliance  of  Mission-Critical  Systems.  USARAK  reports  show  progress  in 
the  renovation  of  mission-critical  systems.  One  mission-critical  system,  the 
truck  radio  system  for  Fort  Richardson,  was  still  reported  as  non-compliant  as 
of  September  27,  1999. 


U.S.  Army  Alaska  Year  2000  Contingency  Plans 

USARAK  was  significantly  behind  in  its  Y2K  contingency  planning  efforts.  It 
had  not  met  the  established  DoD  contingency  planning  deadlines  and  may  not  be 
able  to  adequately  complete  and  exercise  its  Y2K  contingency  planning  efforts 
by  January  1,  2000,  unless  more  vigorous  Y2K  efforts  are  implemented. 

Y2K  Contingency  Plan.  The  DoD  Management  Plan  states  that  two  types  of 
contingency  plans  are  required  as  part  of  the  risk  management  program  to 
mitigate  the  impact  of  Y2K  problems:  system  contingency  plans  and  operational 
contingency  plans  (also  referred  to  as  continuity  of  operations  plans). 
Contingency  plans  are  required  for  all  systems,  regardless  of  whether  a  system 
is  Y2K  compliant  or  not.  Further,  the  DoD  Management  Plan  required  that 
DoD  Components: 
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•  complete  mission-critical  system  contingency  plans  no  later  than 
December  30,  1998; 

•  complete  operational  contingency  plans  by  March  31,  1999;  and 

•  exercise  all  plans  by  June  30,  1999.  (The  Army  Chief  Information 
Officer  established  a  target  date  of  September  30,  1999,  for  all  plans 
to  be  exercised.  In  addition,  the  Army  directed  its  components  to 
provide  unclassified  mission-critical  contingency  plans  to  the  Army 
Y2K  project  office  by  April  30,  1999.) 

System  Contingency  Plans.  System  contingency  plans  detail  the 
procedures  necessary  to  restore  a  system  in  the  face  of  all  anticipated  and 
unanticipated  Y2K  disruptions.  System  contingency  planning  is  a  chief 
information  officer  responsibility. 

Operational  Contingency  Plans.  Operational  contingency  plans  detail 
the  procedures  by  which  the  mission  or  function  supported  by  the  system(s)  will 
be  continued  during  any  prolonged  disruption  of  that  support.  Operational 
contingency  planning  is  a  chief  executive  officer  responsibility.  Operational 
contingency  planning  also  encompasses  different  levels  of  planning:  system- 
level  planning  and  organizational-level  planning. 

•  System-level  planning  contains  the  planning  necessary  to  continue 
operations  when  the  support  from  a  single  system  or  group  of  closely 
related  systems  is  disrupted.  Such  planning  would  generally  include 
highly  detailed  procedures  for  effecting  any  workarounds,  including 
lists  of  resources,  training,  and  other  necessary  items. 

•  Organizational-level  planning  contains  the  planning  necessary  to 
continue  the  primary  mission  or  function  of  the  organization  when 
any  of  the  supporting  mission-critical  systems  are  disrupted. 
Organizational-level  planning  is  performed  by  both  operational  and 
support  commands. 

Programmatic  Contingency  Plans.  Another  type  of  contingency 
planning  plays  a  key  role  in  the  DoD  Y2K  risk  management  program.  Systems 
under  renovation  or  under  development  as  replacement  systems  are  required  to 
have  programmatic  contingency  planning  documented  in  the  risk  management 
program  or  as  a  stand-alone  document.  Such  planning  would  generally  include 
the  alternative  actions  that  should  be  followed  in  the  event  that  the 
implementation  of  the  renovated  or  replacement  system  is  not  completed  before 
January  1,  2000. 

Y2K  Contingency  Plan  Validation.  In  order  to  assess  contingency  plans,  they 
must  be  validated  (exercised)  to  ensure  alternatives  are  realistic  and  executable. 
In  addition,  contingency  plans  should  be  reviewed  regularly  and  modified,  if 
required.  Conditions  change,  and  contingency  planning  documents  should  be 
dynamic  to  meet  current  threats. 
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Contingency  plans  are  verified  primarily  through  exercises.  These  are  not 
pass/fail  exercises,  but  rather  a  structured  process  to  validate  the  information 
and  procedures  contained  in  the  plan. 

Types  of  Contingency  Plan  Exercises.  Three  types  of  exercises  are  available 
to  verify  the  viability  of  contingency  plans:  tabletop  exercises,  procedure 
verification  exercises,  and  actual  operations  exercises.  Requirements  for 
exercising  contingency  plans  vary. 

Tabletop  Exercises.  A  tabletop  exercise  is  a  structured  and  facilitated 
discussion  of  all  actions  to  be  taken  in  response  to  an  exercise  scenario. 

Tabletop  exercises  may  be  used  to  select  the  procedures  adopted  by  the 
contingency  plan.  The  exercises  normally  involve  selecting  a  wide  range  of 
participants  so  that  all  users,  support  staff,  and  administrators  are  represented. 
Tabletop  exercises  provide  the  big  picture,  with  discussions  encompassing  the 
entire  group.  Tabletop  exercises  cause  no  interruption  to  an  operating  system 
and  may  be  conducted  at  relatively  low  costs. 

Procedure  Verification  Exercises.  A  procedure  verification  exercise 
includes  a  review  of  the  operations  in  the  contingency  plan  to  verify  that  they 
support  the  recovery  strategy.  Procedure  verification  exercises  offer  the  benefit 
of  conducting  the  exercise  in  a  continuous  fashion,  using  multiple  teams  if 
desired.  The  exercises  provide  minimal  interruption  to  a  system  and  may  be 
performed  at  relatively  low  costs. 

Actual  Operations  Exercises.  An  actual  operations  exercise  examines 
the  full  range  of  procedures  followed  when  selected  systems  are  disrupted . 
Actual  operations  exercises  offer  the  greatest  opportunity  to  conduct  training 
and  raise  the  level  of  confidence  in  a  contingency  plan.  They  provide  the 
greatest  degree  of  assurance  that  the  contingent  actions  will  work  when 
required. 

USARAK  Contingency  Plans.  USARAK  had  not  prepared  all  required 
contingency  plans  by  the  established  DoD  deadlines.  As  of  June  4,  1999, 
USARAK  had  prepared  contingency  plans  for  only  38  of  its  then  72  (now  62)* 
mission-critical  systems. 

In  addition,  some  of  the  contingency  plans  did  not  include  operational 
contingency  plans.  We  selected  10  of  the  38  contingency  plans  for  our  review. 
However,  USARAK  could  only  provide  5  of  the  10  contingency  plans.  Three 
of  those  plans  did  not  include  USARAK-specific  operational  contingency  plans. 
Furthermore,  for  one  mission-critical  system,  the  Lightweight  Tactical  Fire 
Direction  System  (LTACFIRE),  USARAK  officials  stated  that  a  contingency 
plan  was  not  being  developed  because  the  system  was  Y2K  compliant.  The 
LTACFIRE  is  a  legacy  system  that  is  scheduled  to  be  replaced  in  March  2000 
by  the  Lightweight  Computer  Unit  system.  During  a  2-month  period  (from 


*On  September  27,  1999,  USARAK  reduced  its  mission-critical  systems  by  10  and  reported  only  62 
mission-critical  systems. 
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January  2000  to  March  2000),  LTACFIRE  would  still  be  used  until  the  new 
system  comes  on  line.  USARAK  needs  to  develop  a  contingency  plan  as 
required  by  the  DoD  Management  Plan. 

The  USARAK  Y2K  coordinator  informed  us  on  June  1,  1999,  that  USARAK 
would  prepare  the  remaining  contingency  plans  and  exercise  them  through  an 
actual  operations  exercise  by  the  established  DoD  deadline  of  June  30,  1999. 
As  of  September  27,  1999,  USARAK  had  prepared  57  contingency  plans. 
USARAK  may  not  be  able  to  adequately  prepare  and  exercise  the  62 
contingency  plans  by  January  1,  2000,  unless  vigorous  Y2K  efforts  are 
implemented. 


Prioritization  and  Coordination  of  the  Year  2000 
Contingency  Plans 

USARAK  Y2K  program  management  had  not  developed  plans  to  prioritize  and 
coordinate  Y2K  workarounds.  As  discussed  in  finding  A  for  ALCOM, 
USARAK  needed  to  prioritize  workarounds  to  ensure  critical  mission 
accomplishment  if  resources  prove  inadequate  and  coordinate  workarounds 
outlined  in  its  Y2K  contingency  plans  to  ensure  sufficient  resources  are  in  place 
if  simultaneous  workaround  measures  are  implemented. 


U.S.  Army  Alaska  Year  2000  Efforts 

USARAK  was  significantly  behind  in  its  Y2K  contingency  planning,  testing, 
prioritization,  and  coordination  efforts  because  USARAK  had  not  established  a 
vigorous  Y2K  management  program. 

USARAK,  according  to  USARAK  Y2K  officials,  was  behind  in  its  Y2K  efforts 
because  it  had  not  received  formal  Y2K  program  guidance  or  instructions  from 
USARPAC,  operational  higher  headquarters  of  USARAK.  In  response  to 
Inspector  General,  DoD,  Report  No.  99-126,  “Strategic  Communications 
Organizations,”  April  6,  1999,  USARPAC  stated  it  had  closely  monitored  and 
assisted  its  subordinate  commands’  Y2K  efforts.  In  addition,  USARPAC  stated 
it  had  developed  and  disseminated  a  Y2K  planning  guidance  document  on 
January  16,  1998.  Furthermore,  guidance  was  provided  by  messages,  letters, 
and  email. 

In  addition,  according  to  USARAK  Y2K  officials,  USARAK  had  not  officially 
initiated  formal  Y2K  efforts  until  March  1999.  Efforts  were  initiated  at  that 
time  in  response  to  a  March  16,  1999,  Commander,  ALCOM,  memorandum 
that  tasked  USARAK  to  publish  a  Y2K  OPORD  to  supplement  the  ALCOM 
OPORD. 
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As  a  result  of  the  delayed  Y2K  efforts  undertaken  by  USARAK,  the  risk  of 
Y2K-related  disruption  to  the  USARAK  mission  had  not  yet  been  effectively 
addressed  and  minimized. 


Management  Comments  on  Finding  B  and  Audit  Response 

Summaries  of  management  comments  on  the  finding  and  our  audit  response  are 
in  Appendix  C. 


Recommendations,  Management  Comments,  and  Audit 
Response 

B.  We  recommend  that  the  Commander,  U.S.  Army  Alaska,  immediately 
implement  vigorous  efforts  to: 

1.  Verify  the  accuracy  of  year  2000  assessments  of  mission-critical 
systems. 

Management  Comments.  USARAK  concurred,  stating  that  it  will  increase  its 
monitoring  of  risk  assessments  as  provided  by  the  individual  Program 
Management  Offices,  which  are  responsible  for  risk  assessments,  not  USARAK. 

Audit  Response.  USARAK  has  misinterpreted  our  recommendation.  We  did 
not  discuss  in  this  report  the  monitoring  of  risk  assessments.  We  stated  that 
USARAK  should  verify  the  accuracy  of  its  Y2K  assessments  of  mission-critical 
systems.  This  includes  verifying  the  Y2K  compliance  of: 

•  the  commercial-off-the-shelf  and/or  government-off-the-shelf  systems 
by  contacting  the  vendors  and 

•  USARAK  owned  unique  systems  and  software. 

We  request  that  USARAK  provide  additional  comments  in  response  to  the  final 
report. 


2.  Develop  and  exercise  year  2000  contingency  plans  for  mission- 
critical  systems. 

Management  Comments.  USARAK  concurred,  stating  that  it  assumed  this 
recommendation  addressed  system  contingency  plans  and  that  USARAK  would 
increase  its  monitoring  of  system  contingency  plans  as  provided  by  the 
functional  manager. 
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Audit  Response.  The  USARAK  comments  were  partially  responsive.  As 
discussed  in  page  10  of  this  report,  the  DoD  Management  Plan  requires  two 
types  of  contingency  plans  to  mitigate  the  impact  of  Y2K  problems:  system 
contingency  plans  and  operational  contingency  plans.  USARAK  should  develop 
and  exercise  both  system  and  operational  contingency  plans  for  its  unique 
mission-critical  systems.  In  addition  to  monitoring  system  contingency  plans 
provided  by  functional  managers,  USARAK  should  also  develop  and  exercise 
operational  contingency  plans  for  those  mission-critical  systems  that  are  owned 
by  functional  managers  but  used  by  USARAK.  We  request  that  USARAK 
provide  additional  comments  in  response  to  the  final  report. 

3.  Prioritize  and  coordinate  workarounds  outlined  in  its  year  2000 
contingency  plans  to  ensure  that  sufficient  resources  are  in  place  for  the 
accomplishment  of  U.S.  Army  Alaska  critical  missions  should  workarounds 
be  employed  simultaneously. 

Management  Comments.  USARAK  concurred,  stating  that  it  will  continue  to 
research  and  identify  continuity  of  operations  plans  to  see  if  the  plans  meet  the 
Y2K  operational  contingency  requirements.  USARAK  also  stated  it  would 
develop  specific  Y2K  operational  contingency  plans. 

Audit  Response.  We  considered  USARAK  comments  to  be  applicable  to 
Recommendation  B.2.  Apparently,  USARAK  has  misinterpreted 
Recommendation  B.3.  USARAK  needs  to  first  develop  Y2K  operational 
contingency  plans.  Subsequently,  USARAK  needs  to  prioritize  and  coordinate 
resource  requirements  of  workarounds  outlined  in  its  Y2K  contingency  plans 
(both  system  and  operational).  We  hope  that  this  clarification  is  useful  and  we 
request  that  USARAK  provide  additional  comments  in  response  to  the  final 
report. 


Appendix  A.  Audit  Process 

This  is  one  in  a  series  of  reports  being  issued  by  the  Inspector  General,  DoD,  in 
accordance  with  an  informal  partnership  with  the  Chief  Information  Officer, 
DoD,  to  monitor  DoD  efforts  to  address  the  Y2K  computing  challenge.  For  a 
list  of  audit  projects  addressing  the  issue,  see  the  Y2K  web  pages  on  the  IGnet 
at  http://www.ignet.gov/. 


Scope  and  Methodology 

We  reviewed  and  evaluated  the  steps  ALCOM  and  Component  commands  had 
taken  to  resolve  their  Y2K  issues  to  avoid  mission  disruptions.  Specifically,  we 
evaluated  ALCOM  Y2K  program  management,  the  coordination  of  Y2K 
contingency  plans  by  ALCOM  for  mission-critical  systems,  and  ALCOM  Y2K 
outreach  coordination  with  civil  authorities  and  other  Federal  agencies  in 
Alaska.  In  addition,  we  obtained  background  information  concerning  Y2K 
coordination  for  forces  deploying  out  of  ALCOM  for  a  future  audit.  We  met 
with  the  Y2K  focal  points  for  ALCOM,  USARAK,  the  11th  Air  Force,  and  the 
State  of  Alaska  to  obtain  and  assess  the  status  of  Y2K  efforts  and  coordination 
with  local  officials.  We  compared  those  Y2K  efforts  against  criteria  described 
in  the  DoD  Management  Plan. 

DoD-Wide  Corporate-Level  Goals.  In  response  to  the  Government 
Performance  and  Results  Act,  DoD  established  6  DoD-wide  corporate-level 
performance  objectives  and  14  goals  for  meeting  the  objectives.  This  report 
pertains  to  achievement  of  the  following  objective  and  goal. 

Objective:  Prepare  now  for  an  uncertain  future. 

Goal:  Pursue  a  focused  modernization  effort  that  maintains  U.S. 
qualitative  superiority  in  key  war  fighting  capabilities.  (DoD-3) 

DoD  Functional  Area  Reform  Goals.  Most  major  DoD  functional  areas  have 
also  established  performance  improvement  reform  objectives  and  goals.  This 
report  pertains  to  achievement  of  the  following  objectives  and  goals  in  the 
Information  Technology  Management  Functional  Area. 

•  Objective:  Become  a  mission  partner. 

Goal:  Serve  mission  information  users  as  customers.  (ITM-1.2) 

•  Objective:  Provide  services  that  satisfy  customer  information  needs. 
Goal:  Modernize  and  integrate  DoD  information  infrastructure. 
(ITM-2.2) 

•  Objective:  Provide  services  that  satisfy  customer  information  needs. 
Goal:  Upgrade  technology  base.  (ITM-2.3) 
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High-Risk  Area.  In  its  identification  of  risk  areas,  the  General  Accounting 
Office  has  specifically  designated  risk  in  resolution  of  the  Y2K  problem  as  high. 
This  report  provides  coverage  of  that  problem  and  of  the  overall  Information 
Management  and  Technology  high-risk  area. 

Audit  Type,  Dates,  and  Standards.  We  performed  this  program  audit  from 
May  through  July  1999  in  accordance  with  auditing  standards  issued  by  the 
Comptroller  General  of  the  United  States,  as  implemented  by  the  Inspector 
General,  DoD.  We  did  not  use  computer-processed  data  for  this  audit. 

Contacts  During  the  Audit.  We  visited  or  contacted  individuals  and 
organizations  within  DoD  and  the  State  government  of  Alaska.  Further  details 
are  available  on  request. 

Management  Control  Program.  We  did  not  review  the  management  control 
program  related  to  the  overall  audit  objective  because  DoD  recognized  the  Y2K 
issue  as  a  material  management  control  weakness  area  in  the  FY  1998  Annual 
Statement  of  Assurance. 
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Appendix  B.  Summary  of  Prior  Coverage 

The  General  Accounting  Office  and  the  Inspector  General,  DoD,  have 
conducted  multiple  reviews  related  to  Y2K  issues.  General  Accounting  Office 
reports  can  be  accessed  over  the  Internet  at  http://www.gao.gov/.  Inspector 
General,  DoD,  reports  can  be  accessed  over  the  Internet  at 
http://www.dodig.osd.mil/.  Final  reports  related  to  our  audit  of  “Year  2000 
Issues  Within  the  U.S.  Pacific  Command’s  Area  of  Responsibility”  are  listed 
below. 


Inspector  General,  DoD 


Inspector  General,  DoD,  Report  No.  99-254,  “Operational  Evaluation  Planning 
by  U.S.  Forces  Korea,”  September  16,  1999. 

Inspector  General,  DoD,  Report  No.  99-245,  “Operational  Evaluation  Planning 
at  U.S.  Pacific  Command  Headquarters,”  September  2,  1999. 

Inspector  General,  DoD,  Report  No.  99-163,  “Host  Nation  Support  to  U.S. 
Forces  Korea,”  May  17,  1999. 

Inspector  General,  DoD,  Report  No.  99-126,  “Strategic  Communications 
Organizations,”  April  6,  1999. 

Inspector  General,  DoD,  Report  No.  99-125,  “U.S.  Forces  Korea,”  April  7, 
1999. 

Inspector  General,  DoD,  Report  No.  99-086,  “III  Marine  Expeditionary 
Force,”  February  22,  1999. 

Inspector  General,  DoD,  Report  No.  99-085,  “Hawaii  Information  Transfer 
System,”  February  22,  1999. 
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Appendix  C.  Management  Comments  on 

Finding  B  and  Audit  Response 


USARAK  concurred,  partially  concurred,  and  nonconcured  with  elements  of 
finding  B,  “Status  of  the  U.S.  Army  Alaska  Year  2000  Program,”  stating  that 
the  report  did  not  accurately  indicate  USARAK  Y2K  responsibilities  and 
readiness.  We  examined  the  explanation  for  the  USARAK  position  and 
concluded  that  it  lacks  merit. 

Management  Comments  on  the  Risk  Assessment  Responsibility.  USARAK 
stated  that  the  risk  assessments  for  the  critical  systems  are  the  responsibility  of 
the  Program  Management  Office.  USARAK  also  stated  that  the  report  had 
made  USARAK  responsible  for  risk  assessments  when,  in  fact,  it  is  not. 

Audit  Response.  We  did  not  discuss  in  this  report  either  the  risk  assessments 
or  the  responsibility  for  the  risk  assessment.  We  discussed  the  Y2K  assessment 
phase  that  requires  identifying  and  assessing  each  mission-critical  system  for 
Y2K  compliance.  USARAK  should  be  responsible  for  the  identification  and 
assessment  of  its  mission-critical  systems  for  Y2K  compliance  regardless  of 
system  ownership.  For  example,  USARAK  should  first  identify  the  systems  it 
considers  mission-critical.  Then  USARAK  should  contact: 

•  functional  managers  to  assess  the  Y2K  compliance  of  the  systems 
owned  by  the  individual  program  management  office  and 

•  vendors  to  assess  the  Y2K  compliance  of  the  commercial-off-the- 
shelf  and/or  government-off-the-shelf  systems. 

In  addition,  USARAK  should  assess  the  Y2K  compliance  of  its  unique  systems 
and  software. 

Management  Comments  on  the  System  Contingency  Plan  Responsibility. 
USARAK  stated  that  development  of  system  contingency  plans  is  the 
responsibility  of  the  functional  managers.  USARAK  is  only  responsible  for 
operational  contingency  plans,  which  are  essentially  continuity  of  operations 
plans. 

Audit  Response.  We  concur  that  functional  managers  are  responsible  for 
development  of  system  contingency  plans  for  those  systems  owned  by  the 
individual  program  management  office.  However,  as  discussed  on  page  10  of 
this  report,  the  DoD  Management  Plan  requires  two  types  of  contingency  plans 
to  mitigate  the  impact  of  Y2K  problems:  system  contingency  plans  and 
operational  contingency  plans.  In  addition  to  system  contingency  plans 
developed  by  functional  managers,  USARAK  should  develop  operational 
contingency  plans  for  those  mission-critical  systems  that  are  owned  by  the 
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individual  program  management  office.  Furthermore,  USARAK  should  be 
responsible  for  developing  both  system  and  operational  contingency  plans  for  its 
unique  mission-critical  systems. 

Management  Comments  on  the  Operational  Contingency  Plan 
Responsibility.  USARAK  stated  that  the  development  of  operational 
contingency  plans  is  the  responsibility  of  the  using  operational  command.  It 
stated  that  the  Inspector  General,  DoD,  should  have  confined  its  inspection  to 
operational  contingency  plans  and  should  have  accepted,  where  applicable, 
existing  continuity  of  operations  plans  as  meeting  the  criteria  for  Y2K 
operational  contingency  plans. 

Audit  Response.  As  discussed  on  pages  10  and  11  of  this  report,  the  DoD 
Management  Plan  requires  two  types  of  operational  contingency  planning: 
system-level  contingency  planning  and  organizational-level  contingency 
planning.  The  existing  USARAK  continuity  of  operations  plans  may  meet  some 
of  the  DoD  Management  Plan  requirements.  However,  the  existing  plans 
should  be  revised  to  include  reducing  the  effect  of  Y2K-induced  failures. 

Management  Comments  on  the  Y2K  Assessment.  USARAK  nonconcured 
with  the  finding  that  the  accuracy  of  its  mission-critical  systems  identifications 
and  assessments  was  questionable.  It  stated  that  fluctuations  in  the  number  of 
mission-critical  systems  were  a  result  of  changes  in  system  prioritization  and 
were  not  indicators  of  an  accuracy  problem.  Since  the  audit,  the  Departmental 
Local  Area  Network  had  successfully  completed  two  operational  evaluations  that 
confirmed  its  readiness. 

Audit  Response.  We  agree  that  mission-critical  systems  should  be  prioritized 
for  criticality  within  the  universe  of  USARAK  mission-critical  systems  and  the 
decrease  from  72  to  62  does  not  reflect  an  accuracy  problem.  The  finding 
addresses  the  accuracy  of  the  assessment.  As  discussed  on  page  10  of  this 
report,  USARAK  assessed  the  Departmental  Local  Area  Network 
communications  system  as  Y2K  compliant.  However,  it  did  not  know  the  Y2K 
status  of  the  system’s  components.  Therefore,  USARAK  inaccurately  assessed 
the  system’s  Y2K  compliance.  We  did  not  state  whether  the  system’s 
components  would  successfully  complete  the  operational  evaluations  or  not.  We 
stated  USARAK  should  have  obtained  Y2K  information  on  the  system’s 
components  in  order  to  verify  the  accuracy  of  its  assessment. 

Management  Comments  on  the  Y2K  Contingency  Plans.  USARAK 
nonconcurred  with  our  conclusion  that  USARAK  will  not  be  able  to  adequately 
complete  and  exercise  its  Y2K  contingency  plans  by  January  1,  2000,  stating 
that  USARAK  had  already  taken  steps  to  ensure  contingency  planning  is 
completed  and  exercises  are  conducted  well  before  January  1,  2000. 

Audit  Response.  We  consider  our  conclusion  on  the  Y2K  contingency  plans  to 
be  valid.  As  of  June  4,  USARAK  had  prepared  38  contingency  plans.  During 
the  period  from  June  4  through  September  27,  1999,  USARAK  prepared  19 
additional  contingency  plans:  an  average  of  5  plans  per  month.  At  that  rate. 


20 


USARAK  may  have  time  to  complete  all  62  contingency  plans  but  may  not  have 
time  to  exercise  them  by  the  end  of  December  1999,  unless  more  vigorous  Y2K 
efforts  are  implemented. 

Management  Comments  on  the  Prioritization  and  Coordination  of  the  Y2K 
Workarounds.  USARAK  nonconcurred  with  the  finding  that  USARAK  had 
not  developed  plans  to  prioritize  and  coordinate  Y2K  workarounds,  stating  that 
USARAK  had  clearly  stated  and  coordinated  its  workarounds  within  the 
contingency  planning  documents  and  the  USARAK  OPORD. 

Audit  Response.  We  consider  the  finding  on  the  prioritization  and  coordination 
of  the  Y2K  workarounds  to  be  valid  because  USARAK  had  not  prepared  all 
required  contingency  plans.  USARAK  cannot  prioritize  or  coordinate  the 
workarounds  until  it  completes  all  required  contingency  plans. 

Management  Comments  on  Y2K  Efforts.  USARAK  nonconcurred  with  the 
report’s  statement  that  USARAK  was  significantly  behind  in  its  Y2K 
contingency  planning,  testing,  prioritization,  and  coordination  because 
USARAK  had  not  established  an  aggressive  and  vigorous  Y2K  implementation 
program.  USARAK  stated  that  this  statement  does  not  accurately  reflect  the 
USARAK  Y2K  efforts.  USARAK  stated  that  the  initial  Y2K  efforts  focused  on 
Information  Technology  Y2K  hardware  and  software  compliance  and  on 
infrastructure  (non-information  Technology),  such  as  power  and  water.  In 
February  1999,  the  Y2K  effort  changed  its  focus  to  operational  contingency 
plans  and  the  USARPAC  sent  out  formal  tasking  and  guidance.  In  those 
instances  where  continuity  of  operations  plans  cannot  address  the  Y2K 
operational  contingency,  USARAK  will  write  specific  Y2K  contingency  plans. 

Audit  Response.  We  consider  the  statement  to  be  valid  because  USARAK  was 
significantly  behind  in  its  Y2K  contingency  planning,  testing,  prioritization,  and 
coordination  efforts.  The  DoD  Management  Plan  required  the  completion  of 
operational  contingency  plans  by  March  31,  1999,  and  exercise  of  all  plans  by 
June  30,  1999.  USARAK  has  not  completed  the  operational  contingency  plans. 
Accordingly,  we  concluded  that  USARAK  had  not  established  a  vigorous  Y2K 
management  program. 
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Appendix  D.  Report  Distribution 


Office  of  the  Secretary  of  Defense 

Under  Secretary  of  Defense  for  Acquisition  and  Technology 
Director,  Defense  Logistics  Studies  Information  Exchange 
Under  Secretary  of  Defense  (Comptroller) 

Deputy  Chief  Financial  Officer 
Deputy  Comptroller  (Program/Budget) 

Under  Secretary  of  Defense  for  Personnel  and  Readiness 
Under  Secretary  of  Defense  for  Policy 

Assistant  Secretary  of  Defense  (Command,  Control,  Communications,  and 
Intelligence) 

Deputy  Assistant  Secretary  of  Defense  (Command,  Control,  Communications, 
Intelligence,  Surveillance,  Reconnaissance,  and  Space  Systems) 

Deputy  Chief  Information  Officer  and  Deputy  Assistant  Secretary  of  Defense  (Chief 
Information  Officer  Policy  and  Implementation) 

Principal  Director  for  Year  2000 


Joint  Staff 

Director,  Joint  Staff 


Department  of  the  Army 

Assistant  Secretary  of  the  Army  (Financial  Management  and  Comptroller) 
Commander,  U.S.  Army  Pacific 
Commander,  U.S.  Army  Alaska 
Auditor  General,  Department  of  the  Army 
Chief  Information  Officer,  Army 
Inspector  General,  Department  of  the  Army 


Department  of  the  Navy 

Assistant  Secretary  of  the  Navy  (Financial  Management  and  Comptroller) 

Commander,  U.S.  Naval  Forces  Alaska 

Auditor  General,  Department  of  the  Navy 

Chief  Information  Officer,  Navy 

Inspector  General,  Department  of  the  Navy 
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Marine  Corps 

Commandant  of  the  Marine  Corps 
Inspector  General,  Marine  Corps 


Department  of  the  Air  Force 

Assistant  Secretary  of  the  Air  Force  (Financial  Management  and  Comptroller) 
Commander,  U.S.  Pacific  Air  Forces 
Commander,  1 1th  Air  Force 
Auditor  General,  Department  of  the  Air  Force 
Chief  Information  Officer,  Air  Force 
Inspector  General,  Department  of  the  Air  Force 


Unified  Commands 

Commander  in  Chief,  U.S.  European  Command 
Commander  in  Chief,  U.S.  Pacific  Command 
Commander  in  Chief,  U.S.  Forces  Korea 
Commander,  Alaskan  Command 
Commander  in  Chief,  U.S.  Atlantic  Command 
Commander  in  Chief,  U.S.  Southern  Command 
Commander  in  Chief,  U.S.  Central  Command 
Commander  in  Chief,  U.S.  Space  Command 
Commander  in  Chief,  U.S.  Special  Operations  Command 
Commander  in  Chief,  U.S.  Transportation  Command 
Commander  in  Chief,  U.S.  Strategic  Command 


Other  Defense  Organizations 

Director,  Defense  Contract  Audit  Agency 
Director,  Defense  Information  Systems  Agency 

Commander,  Defense  Information  Systems  Agency,  Pacific 
Inspector  General,  Defense  Information  Systems  Agency 
Chief  Information  Officer,  Defense  Information  Systems  Agency 
United  Kingdom  Liaison  Officer,  Defense  Information  Systems  Agency 
Director,  Defense  Intelligence  Agency 

Inspector  General,  Defense  Intelligence  Agency 
Director,  Defense  Logistics  Agency 
Director,  National  Imagery  and  Mapping  Agency 

Inspector  General,  National  Imagery  and  Mapping  Agency 
Director,  National  Security  Agency 

Inspector  General,  National  Security  Agency 
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Non-Defense  Federal  Organizations  and  Individuals 

Office  of  Management  and  Budget 

Office  of  Information  and  Regulatory  Affairs 
General  Accounting  Office 

National  Security  and  International  Affairs  Division 
Technical  Information  Center 
Accounting  and  Information  Management  Division 

Director,  Defense  Information  and  Financial  Management  Systems 
Inspector  General,  Federal  Emergency  Management  Agency 


Non-Defense  U.S.  Government  Individual 

Lieutenant  Governor,  State  of  Alaska 


Congressional  Committees  and  Subcommittees,  Chairman 
and  Ranking  Minority  Member 

Senate  Committee  on  Appropriations 

Senate  Subcommittee  on  Defense,  Committee  on  Appropriations 
Senate  Committee  on  Armed  Services 

Senate  Subcommittee  on  Acquisition  and  Technology,  Committee  on  Armed  Services 

Senate  Committee  on  Governmental  Affairs 

Senate  Special  Committee  on  the  Year  2000  Technology  Problem 

House  Committee  on  Appropriations 

House  Subcommittee  on  Defense,  Committee  on  Appropriations 
House  Committee  on  Armed  Services 
House  Committee  on  Government  Reform 

House  Subcommittee  on  Government  Management,  Information,  and  Technology, 
Committee  on  Government  Reform 

House  Subcommittee  on  National  Security,  Veterans  Affairs,  and  International 
Relations,  Committee  on  Government  Reform 
House  Subcommittee  on  Technology,  Committee  on  Science 
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Alaskan  Command  Comments 


HEADQUARTERS 
ALASKAN  COMMAND  {AlCOM} 
ELMENDORF  AIR  FORCE  BASE,  ALASKA  99606 


AUG  9  TO 

MEMORANDUM  FOR  DOD  INSPECTOR  GENERAL 

FROM:  COMALCOM 

9480  Pease  Avenue,  Suite  101 
Elmendorf  AFB  AK  99506-2100 


SUBJ:  Audit  Report  on  Year  2000  issues  within  the  US  Pacific  Command’s  Area  of 
Responsibility  -  Alaskan  Command  (Project  No  8CC-0049.08) 

1  I  appreciate  the  constructive  critique  of  Alaskan  Command’s  Y2K  management  program 
recently  completed  by  the  DoD  Inspector  General  Anytime  expert  eyes  evaluate  one  of  our 
programs  we  stand  to  benefit  greatly.  I  concur  with  both  recommendations  as  outlined  in  the 
draft  report. 

2.  As  recommended,  I  will  continue  to  track  and  monitor  the  renovation  of  non-compliant 
mission  critical  systems  ALCOM  has  only  two  non-compliant  mission  critical  systems 
remaining:  Fort  Richardson’s  water  production  plant,  and  Elmendorf  s  command  and  control 
network  backbone.  I  previously  took  action  to  ensure  renovation  and  fully  expect  certification 
by  30  Aug  99  and  30  Oct  99  respectively. 

3  Based  on  a  preliminary  recommendation  and  as  noted  in  the  report,  I  took  corrective  action  to 
ensure  ALCOM  has  sufficient  communication  resources  within  its  area  of  responsibility  to 
support  Y2K  contingency  plans. 

4.  I  concur  with  the  recommendation  to  prioritize  workarounds  to  offset  negative  impact  of 
possible  simultaneous  workaround  failures.  I  previously  took  action  on  this  recommendation  by 
outlining  workaround  system  restoration  priority  as  depicted  in  the  attached  extract  of  ALCOM’s 
OPORD  5220-99  dated  30  Apr  99 


5.  ALCOM  remains  committed  to  a  first-class  Y2K  preparation  effort  and  is  ready  to  provide 
any  additional  information  or  assistance.  Please  feel  free  contact  my  Y2K  project  officer,  Lt  Col 
Bill  Turner,  commercial  (907)  552-2607,  DSN  317-552-2607  or  e-mail 
tumer.william@elmendorf.af.mil  as  needed. 


THOMAS  R.  CASE 
Lieutenant  General,  USAF 
Commander 


Atch 
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U.S.  Army  Alaska  Comments 


departmcht  of  the  army 

wEAOQtUKTBlS,  VT  *****  ALASKA 
Fomr  AU4U  xnmoo 


APVMUROMci 


MEMORANDUM  THRU  United  States  Amy,  Pacific,  ATTN:  ARCS  (COL  Tucker), 

Feet  Sbaftcr,  HMli  9St5M100 

FOR  lon*c*or  OcaenJr  Detunmear  of  Detox,  AT1N:  Shallow  R.  Voawfr 

pgtdof,  fUatiacw  aodLotitoi  Support  Dtwctowu,  400  Amy  Navy  Drive, 
Artin^totuVittuu*  22202 

SUBJECT:  U&ARjUC  Command  Com mtnfa  <m  the  draft  report  ooAarfii  of Year 2000  Zawta 
Within  the  U.S.  Pacific  Coonoffe  Asm  of  KajpcquWrty  -  AlaiUa  ConwttdCPrcject  No. 
BCC-0049.0D, 


1.  !UtoaotM«af)raU(fi^O0lMOffi»  Impact*  G*wi<D«pnrta«Bt  orD*fcae«,2S  July99. 

•Bbjocc  desfi  import  en  Audti  efY«u  2000  !»»»«  Withia  the  U.S.  Padfie  Command's  Am  of 
RcspomibCiiy  -  Aliukaa  Command  (Project  No,  ICOOW9XS). 

Z  TlstmAlUUCttanmwumsaMiettedtoDODItod^ 

mpooding^tha^igiuta.ifaqc«rjoc>c«i»ipaftaitta4iocrmimandxH^innaWpamttY2K 
fajwnabflittas  that  ahmU  b* 

a.  USARAJC  H  flaa  pooad  occnpoueat  ooerond  (GCC)  to  the  jub-omflM  wmwnti 
AIXX>M  aid  U  unitor  th*opa»liporfeccm>i<PPCC^  of  ALCOM.  US  ARAKbatoot  major 
suboctfbato  txmm*  OOQ  *>  USAKTAC  mud  k  wfc*  tb*  AdmWittativ®  Ccwa^^ 
(ADCOWADCCfli)  of  USARPAC.  Thmtfon,  USAIUKKhm<h^>^«^aadfcDrtioqal 
mpoodbftte.  USAltfAC;hl^AIXX»A  toTHtoXiwp^^ 

id DB.txam sad •qu^tefcaw.  By ookwioatficYZlCiimc meets tfcjtlfetoXtttaia. 

b.  asM*m>*^^th«cntvn2syalacasw«0>Br«]x»sn)Ulty  ofiiaPlotma 
Mtoa^n*«AOmqo(FMOX».I,5INCXiARSDsk»^MmmawvWW4awbyCECOM,*c 

PMa 

c.  Systegn  wnflagTOypte»dun>touyrtirctoreipccilbU^ 

t#-  SINCQAR3  jjygtcau  cectiago^  plans  art  to  dona  by  DSCOPS.  tba  ftjncttooal  pwpoaM 
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Final  Report 
Reference 


APVJUWR  (36-3Q 

SUBJECT:  USARAKCommart  Corancrtioaibt  drift  r^ort  on  Audit  of  Veer  2000  Uftio* 
Withdr  the  U  A  Pttfec  Cocuraod,»  Am  of  JUtpowibUity  -  Altaian  Comm  ted  (Project  No. 
ICC-0049.01). 


d.  Operational  coerinfeocy  pitot  dcvttopcoeox « the  mpontiHlity  of  the  using  operational 
cotnaactf,  «.j.,  if  Sl^COAJtS  ftU  how  will  U8ARAK  continue  to  operotc.  Tbia  if  eroeotudly  « 
cootiatoty  of  opertripo  (COOP)  iwut  of  wbtehY2Kla«vab»*» 

The  PoPIO  report  hjny  reede  USARAK  responeibU  fee  riakwK  wnertiwhcn.infkt.it  knot, 
bectuei  it  ia  the  PMCTi  rtspocsibiUtr  imd  USAXAKii  aotthePMO.  Thcroport  tiro  meto 
USARAK  roportaib^e  <br  cootb^cacy  pitot,  afcca, »  feet,  USARAK  ia  wJy  responsible  for 
operadoetcccrtn^ehcypivu,  which  sro  camtially  COOP  pleas.  Tb*  fmetiorod  proponent, 
vfeicfc  USAKAK  ia  pot,  it  mponalbW  fertile  other  helfof  «wtla$«noy  ptaun*  Lt-  aysums 
eotttingeocy  pbnt.  In  both  the  risk  nwnrurt  tod  systems  ceutiagccacy  pi*u  USARAK  hta  no 
control  USARAK  ^ta  only  ecefcoi  the  tmorc-penticr^  c^cgiin^pltw  tj^  inmacjcaaa 
tl^^pf«>cttJur»Irinttttw*.  Therefore*  the  DoDIG  ihoukd  Wc  oceifloed  to  inspection  to 
operational  ocmtic^tncy  pUas  mod  should  bnr*  accord,  wbera  U  ww  applicable,  eauelia* 
continuity  of  op«Gtti}oiii  plans  at  meeting  the  admit  for  Y7K  opcnctaai  wortqjeocy  pfcat. 

y  %^rB:  ofth.  u>ked  Start-  Aims  Abmkm  (USARAK)  Ym  2000  fr-jam. 

IfcAttAX  ra«iMite  USARAK  PartlilC— cnrrtnct  with  coaoeot  tfcrt  fee  PoP  10  Two 
ftadhtp  tre  kk*4  tocurotr  nifcrtot  of  USARAJUi  fUarfmm.  Then  wu  t  cbu*e  ia  the 
Office  of  Primiry  RttpcosibiUty  (OPR)  from  DOIM  to  DCSOfS  in  U*  Aptti  1999.  The 
process  in  which  YZK  eotioua  we  beodled  within  USARAK,  both  *hflt  «odw  D01M 
mpocmbOity  tnd^bMqowtly  \indtr  DCSO?6>  W*  bnvc  been  tsenged  awro  effectively. 
Hoiroroe,  the  tetioo*  token  by  the  USARAK  Y2X  Team,  staff;  and  rpsam  administrators  io 
proper*  for  the  Y2Kju«uttiao  hero  been  *ell  wordimed  ted  exeoided. 


IM  Anwr  AUrti  YfifTtHW  A— mL 

PcpD  1G  Stalnr,  niSARAK  wm  months  behind  in  to  V2X  ronuntn  effort*.  USARAXdid 
oot  meet  the  eattU^hed  Y2K  ueetamenl  deadline  and  die  accuracy  of  Re  earoioe^roWeel  tystoxn 
idatfificstioBs  sod  emromeota  ww  questionable” 

fffrttt  tv  USARAK  caunn  tiutlhiV  sro  POOttiS  behind  hi  to  Y2K  taanoacl 

efforts  md  did  oot  rpm  ctrablhbrd  Y2K  eroewognt  deedlroec.  USARAK  did  no*  meet  the 
established  Y2K  A^seaanaeai  Phase  eorayktioadattef  JuneJO,  1997.  Howeroc  USARAK 
■tamyrtn  withDoDIG's  Sndine  feet  the  eocurtcy  of  iti  «nttioo<rtd<el  tyrtwn 
identifications  tad  tucranmia  sre  gpirttionahlc 


2 


Deleted 
“identifica¬ 
tions  and” 
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APVR.Rm  (36-50)1 

SUBJECT:  USAK^ Owun«^  ©ati*  fait  report  oo  Audit  of  Yaar  2000  l»u*f 

Within  iht  U.S.  P*dAc  CoampJi  Aim  of  JUMpoolbility  -  Alaskan  CansuDd  (Preset  No. 
ICC-0049.0®). 


The  fluctuations  in  tie  number  of  Musion  Critics]  Symons  «ta  itsuh  of  d»csw  miystom 
prioritLrttiori  and  ®q  not  indicstofs  of  aa  accuracy  pobfett.  Tbt  DoD  10  finding  was  buod  on 
th*  USARAK  Depafjraaiul  Local  Aim  Natwork  (DLaN).  Tbt  DLAN  has  face  auccoitfuUy 
completed  two  OPSTj/ALS  fat  confirmed  its  readbew- 


1L&  Anm  Ytar  WfO  StaftMggLBaflfc 

PtD  ICSorn;  •RJfcARAK  w*  alt©  sirmficamly  baHad  in  its  Y2K  contb^tocy  panning 
efforts.  H  htl  fat  the  otabiiibad  DoD  contingency  panning  d**dlia«  and  will  n<*  be  nbk 

to  adequately  oomplrtc  tod  cxerdat  to  Y2X  contiaccaqr  pfambg  afltrt»fcyJ«»«i7 1.2000, 
unless  mnatve  ask  vigocoui  Y2K  efftas  tit  fappteoertted.* 

VSARAKCwaaiatlE  usAJ^i*^w!thooo»rt(^iUv«b^ft-D^ 
Timeline  to-  devetp^nc  CsotB*«ney  Plui.  The  USARAK  Operations  Oriel  (OPORD)  5230, 
puMilW  in  JgJy  1 9W.  tail*!  (It  tk  euberiiaMe  .tetrads  to  pwjaw  ud  tett  n*aa  ted 
opcmdootl  contingency  plw*  (wcriciround  plans)  for  Matioa  Critical  Syatena.  U&AKAKU 
making  good  proyrew  toward  comparing  these  requlrciDci*  IAW  AIXOM  gukHinrs 

USARAK  Mmcwto  with  fa  opcm**  fay  wUI  wX  be  abU  lo  ^Jwtu^tly  ooeptote  md 
occxtiac  its  Y2^eoi^bgaicypitttttng  efforts  by  JiERaiy  1.2000.  US  ARAK  baa  tlwady  taken 
Heps  to  eofuxv  cootihficacy  pUonbif  and  cxcrcbc*  are  conducted  well  before  January  1, 2000. 
USARAK  puMUbrait*  owe  Y3JC  Operation*  Order  m  July  1999  awl 
progress  in  mediae  of  AJXOVf  j  Y2K  Q©*b.  AB  aubotfalte  wtoactp^afaci* 
ry^Hnpnfy  pim  ofa  Arir  mWp-oridcal  VfttBU.  USARAK  tttidated  lone cf  these 
eo«iat*w  plans  Wdit.  3  Jw  1999  ALO)MY2KCPX  Tbs  »*  of  these  jfauwiM  be 
validtttd  b  txorattti  oooducltd  b  UN  iiMnatr  ^  wlwib 


C— rfaitfal  Ml  ftfarfffatl—  sf*»  Yw  2000  Wntamab. 

Dtp  M3  Stotts:  HDSARAK  Y2K  procim  umsxfcam*  hod  pot  devoid  to  co«rffate 

sadpvkritto  Y2K  VoridBOond . .  " 


_ r___  USARAK  wmsSMSSn  with  DoD  tO  atatamaatlfarf  USARAK  fed  m* 

developed  pko*  to  coordinate  and  pcwdUee  Y2K  Workaround#-  It  te  not  olssr  a#  to  fa 
justification  fa  DQO  10  Tsam  wed  to  few  this  finding,  USARAK  bm  deariy  stated  and 

opoidinltd  its  workaround#  wklfa  contingency  farming  dposasnla  sad  tbt  USARAK  OPORD 

5220*99- 
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Am4UR0«C)| 

SUBJECT:  USARAK  Command  CommtnB  on  tbc  <fcaft  report  on  Aixfil  of  Year  2000  Jstue* 
Within  the  tl.S.  Pacific  Commacd*!  Area  of  Responsibility  •  AtiiWn  Command  (Project  No. 
8CC-0W9.03).  1 


yAAmr*miBiVwr«WMwti. 

tttPIG  States:  “USARAK  m  significantly  behind  in  its  Y2K  contingency  pfaaung  f  taking, 
cooidinatfon.  and  priorittotioa  eflbcti  brave*  USARAK  bed  not  cetabtisbed  an  eggreMive  tad 
vigorous  Y2X.  matM^emcnt  proyrm" 

USARAK  Cf  Btttitr  USARAK  mcnce^ran  with  cocmrni  on  DoD  IO  dMecaeaL 
USARAK  does  oot  fgree  the  DoDIG  tbt*sxu*  because  ir  doe*  not  iccunldy  reflect  the 

USAOAJCYTXcffctt.  Tha  initial  Y2X  effort  focuiad  on  Y2K.  hncdwwe  and  software 
cowplisacy  oo  dw  l6Jbraufiio&  TechtMlogy  (IT)  portico.  Th»  wi$  carried  w*  cm  a  DOflvf  to 
DOIM  Uv*L  The  .oiur  portion  of  tW*  Initial  effort  eddftwed  the  ooo~lT  ctr  intetnietur*,  *g.f 
power,  water,  ete„  and  addressed  by  the  installation  commando*.  Tbcw  two  btseHae  effort* 
reached  maturity  in  February  1999  and  are  nearly  complete.  In  February  of  199V,  the  Y2K  effort 
ebmgtd  Its  tares  uplopareticos  coutmgcnoy  plans  tod  the  USARPAC  DCSOPS  rat  out  formal 
tasking  and  gmdancjr  USaXAK  is  oerrendy  reviewing  its  continuity  of  operations  (COOP) 
pku  wraifil  is  applicable  to  Y2K  to  the*  Instance  where  COOP  oenno*  address  the  Y2K 
optretiooa]  cotttiiWKy*  U8ARAX  will  writ*  specific  Y2K  oorxttogfncy  plans.  Within  this 
contact,  USARAK  does  not  foctra  any  problems  in  ccmplrting  aB  required  Y2K  actions  well 
before  1  JmumijMJO  deadline. 

I 

DoD  IG  States:  ^e  n»c«amrod  that  the  Cwain^  US,  Airny  Alaska,  immediately 

implement  aggressive  and  vigorous  efforts  to: 

1.  Verify  tifc  accuracy  of  year  2000  uwwiroti  of  mleekxjrcriiical  lyreuua. 

2.  Devehjpiaod  a*arcaseyrer  2000  ooixJiataoey  plra  fiw  aussiOA^  system*. 

y  Pwforpi  Ita  coordination  ofwariamjuodsmdlliied  to  cooti&grayplra  to  Terify  that 
faffiofodpqwurm  ere  to  plane  and  to  rabtish  priorities  to  preside  tor  the 
aeoompUshiDat  of  U.S.  Army  Alaska  critical  afaponfc* 

DSaRAK  fftlpli'  B-t  through  B-3  KacetmaandiHeaet  CONCUR 

Rocoomreliarion  *>1.  USARAK will  iacraoa  its  momtorinc  of  risk  eeseumaata  ee 
provided  by  fisc  Prfcrem  Management  Qffioe,  Rationale;  The  TrogSMm  Management  Office  is 
twpoGUbie  taririf  aocsnnmttiwtUSARAK 
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Audit  Team  Members 


The  Readiness  and  Logistics  Support  Directorate,  Office  of  the  Assistant 
Inspector  General  for  Auditing,  DoD,  prepared  this  report.  Personnel  of  the 
Office  of  the  Inspector  General,  DoD,  who  contributed  to  this  report  are  listed 
below. 

Shelton  R.  Young 
Robert  M.  Murrell 
Young  J.  Jin 
Keith  A.  Yancey 
Charles  R.  Johnson 
Michael  J.  Guagliano 
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A .  Report  Title:  Year  2000  Issues  Within  the  U.S.  Pacific  Command’s 
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